Multi-Tenant Login Selection for Duplicate E-Mail Accounts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in allowing duplication of identification information for login, particularly when users belong to multiple tenants, as e-mail addresses are unique and cannot be registered for multiple tenants, and conventional technologies struggle to assign the same person to multiple tenants effectively.
Innovation Solution
The information processing apparatus allows duplication of identification information by enabling users to belong to multiple tenants by using e-mail addresses that can be registered across different tenants, with options for selecting the appropriate tenant and password policies, and prioritizing entries based on creation or usage history.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If e-mail addresses are used as unique user names for login, then user identification reliability is improved, but user versatility to belong to multiple tenants deteriorates
Solution Approach 1:
The patent segments the user identification system by introducing a tenant ID that divides the unique identification space. Each tenant maintains its own namespace for user names, allowing the same user name (e-mail address) to exist across different tenants without conflict. This segmentation resolves the contradiction by maintaining reliability within each tenant while enabling versatility across multiple tenants.
Solution Approach 2:
The patent adds a new dimension (tenant ID) to the user identification system. Instead of relying solely on the e-mail address as a unique identifier, the system now uses a combination of tenant ID and user name. This dimensional expansion allows users to belong to multiple tenants simultaneously, resolving the contradiction between unique identification and multi-tenant versatility.
2Adaptability or versatility
If user information is registered for each combination of user name and tenant, then user versatility is improved, but system complexity increases
Solution Approach 1:
The patent segments user information storage by tenant, creating separate data structures for each tenant-user combination. This segmentation allows the system to manage complexity by organizing data in a structured, hierarchical manner rather than requiring a single complex global registry.
Solution Approach 2:
By adding the tenant ID dimension to user information storage, the patent creates a two-dimensional data structure (tenant ID × user_name) that systematically organizes user information. This dimensional approach simplifies complexity by providing a clear, predictable data organization scheme that scales naturally with the number of tenants and users.
3Stability of the object's composition
If duplicate e-mail addresses are prohibited across tenants, then data consistency is improved, but user adaptability to multiple tenants deteriorates
Solution Approach 1:
The patent segments the data consistency requirement by tenant, allowing each tenant to maintain its own consistent namespace for user names. Duplicate e-mail addresses are permitted across different tenants because each tenant's data structure is independently consistent, resolving the contradiction between data consistency and user adaptability.
Solution Approach 2:
By introducing the tenant ID dimension, the patent transforms the data consistency model from a global constraint to a local constraint within each tenant. This dimensional change allows the same e-mail address to exist in multiple tenants' namespaces while maintaining data consistency within each tenant, thereby enabling user adaptability to multiple tenants.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An information processing apparatus includes a searching unit configured to search for user information corresponding to identification information included in a login request, in a storage configured to store user information of each user, in response to receiving the login request including the identification information and a password; and a selecting unit configured to select, as user information relating to a user for which login is to be allowed, one piece of user information among a plurality of pieces of user information, in response to detecting that the plurality of pieces of user information are retrieved by the searching unit.